dotenv vulnerabilities — Scandar